MaliLoi n° 2013-015, automated decisions
Loi n° 2013-015, art. 2 (automated individual decisions)
In force since .
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights
- Audit expectation
- none
What it requires
- Do not base a decision producing legal effects for a person solely on an automated processing designed to profile them or evaluate aspects of their personality.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 3.5Processes for human oversight are defined, assessed, and documented in accordance with organizational policies from the GOVERN function.
- NIST Privacy Framework
- CT.DM-P10Stakeholder privacy preferences are included in algorithmic design objectives and outputs are evaluated against these preferences.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
What record it asks for
Logging duty
Article 2 bars any decision producing legal effects on a person that rests solely on computer processing meant to profile the person or assess aspects of their personality. It is a prohibition on the decision and requires no log, register or record of it, and no review is named.
- Kind
- None
- As of
What this law does
Article 2 bars any decision that produces legal effects for a person from being based solely on automated processing designed to profile the person or evaluate aspects of their personality. Unlike some neighboring Francophone data protection laws, Mali's article does not carry a separate, unqualified bar limited to judicial decisions; a single sentence covers any decision-maker, public or private, on a solely-automated basis.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.
Back to the example · Lint your app
Page updated .